Security You Can Rely On
Security at every layer
Built with security in mind
Eazyhosting takes a defence-in-depth approach to security. Rather than relying on a single protection measure, we layer multiple independent security controls across the network, hardware, and software levels. This means that even if one layer is bypassed, others remain in place to protect your website and data.
Security features are included as standard — you don't need to purchase add-ons or configure anything to benefit from them.
PCI DSS Compliant
Our infrastructure meets Payment Card Industry Data Security Standards.
Security features included
PCI Compliant Servers
Our hosting infrastructure complies with PCI DSS — the security standard required for processing card payments online.
Automatic Malware Scanning
Your hosting account is continuously scanned for malware and malicious files. Threats are detected and flagged automatically.
1 Tbps+ DDoS Protection
Network-level DDoS mitigation keeps your website online even during large volumetric attacks.
FTP Security Lock
Lock FTP access to specific IP addresses, preventing unauthorised access to your website files.
Free SSL Certificate
Every hosting account includes a free SSL certificate, encrypting all data transmitted between your website and its visitors. Our guide to SSL certificates for small businesses explains what free SSL covers and what to check if your site shows a warning.
Secure Data Centres
Physical access to our UK data centres is controlled by multi-factor authentication, CCTV and manned security.
Daily Backups
Automatic daily backups with 30-day history mean you can always restore to a clean version of your site.
Email Spam Filtering
Built-in spam and virus filtering protects your inbox from malicious messages and phishing attempts.
PCI DSS compliance explained
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements for organisations that handle card payment data. Hosting your ecommerce store on PCI-compliant infrastructure is an important baseline for any business accepting online payments.
Our hosting infrastructure has been built to meet these standards, giving you one less compliance burden to worry about when accepting payments online.
About SSL CertificatesServer-level threat filtering
Web Application Firewall
Our bespoke Web Application Firewall (WAF) monitors every request reaching your website and filters out malicious traffic before it can interact with your application. Unlike generic, off-the-shelf firewalls, ours has been built specifically for the platform and is continuously updated to respond to emerging threats.
The WAF protects against the most common and damaging attack types, including SQL injection — where attackers attempt to manipulate your database through form inputs — and cross-site scripting (XSS), where malicious code is injected into pages served to your visitors. Suspicious requests are blocked automatically with no action required from you.
- SQL injection protection — malicious database queries blocked before reaching your application
- Cross-site scripting (XSS) defence — malicious scripts filtered from incoming requests
- Bespoke rule set — built specifically for the platform and continuously maintained
- Automatic — no configuration required; active on all accounts from day one
For WordPress sites
WordPress Security Tools
WordPress is one of the most frequently targeted platforms on the web. Our hosting includes a dedicated set of WordPress security tools — accessible directly from StackCP — that make it straightforward to keep your installation clean and protected.
Daily Malware Scanning
Your WordPress site is scanned daily for malware, malicious files, and suspicious code. Alerts are raised automatically so you can act quickly. On-demand scans are also available for immediate confirmation after resolving an issue.
WordPress Checksum Report
Our checksum tool compares your WordPress core files against the official WordPress repository. Any file that has been modified or replaced — whether by a hacker or a corrupted update — is flagged for review, so vulnerabilities can be addressed before they're exploited.
File Permissions Checker
Incorrect file permissions are a common but easily overlooked vulnerability. Our file permissions checker scans your hosting account, identifies files and directories with insecure settings, and provides clear guidance on how to correct them.
Wildcard SSL Certificates
Every account includes free Wildcard SSL certificates, which cover your primary domain and all subdomains. Encrypted connections protect data in transit and improve your search engine ranking — Google treats SSL as a quality signal.
Control panel and file access
Login and Access Security
Multiple layers of protection guard your hosting account, control panel, and website files from unauthorised access.
Two-Factor Authentication
Protect your StackCP account with a second verification step. Even if a password is compromised, two-factor authentication prevents unauthorised access to your control panel.
Brute-Force Protection
StackProtect monitors login attempts to your websites and detects automated credential-stuffing and brute-force attacks — blocking suspicious activity before accounts are compromised.
FTP Security Lock
Lock FTP access entirely when not in use. When unlocked, access can be restricted to specific IP addresses — so only authorised users and devices can transfer files.
Password-Protected Directories
Restrict access to any folder on your site with HTTP authentication — useful for staging environments, internal tools, or any area that shouldn't be publicly accessible.
Visitor Blocking
Block traffic from specific countries or IP addresses directly from StackCP. Useful for cutting off persistent sources of malicious requests or restricting access to specific regions.
Where your data is physically held
Data Centre Security
Our data centres are secured to the highest standards and hold ISO27001:2013 certification — the internationally recognised benchmark for information security management. Physical and environmental security controls are in place at every level.
Redundant power supplies ensure that a mains failure does not result in downtime. Access is controlled by gated entry requiring photo ID and swipe card — no one enters without authentication. CCTV monitoring operates continuously, and on-site engineers are present around the clock, every day of the year, to respond immediately to any hardware issue.
Our servers also meet PCI DSS (Payment Card Industry Data Security Standard) requirements, making our infrastructure a compliant foundation for ecommerce sites that handle card payments.
- ISO27001:2013 certified — internationally recognised information security management standard
- Redundant power supplies — no single power failure brings systems down
- Gated access — photo ID and swipe card required for physical entry
- 24/7 CCTV monitoring — continuous surveillance of all data centre areas
- On-site engineers — always present to respond immediately to hardware issues
- PCI DSS compliant — infrastructure meets the security standard for online payment processing
Security included as standard
Every Eazyhosting plan includes comprehensive security features at no extra cost.
Web Hosting VPS Hosting